Title

Only essential services must be allowed through firewall. (Cat II impact)

Discussion

Allowing only essential services through the firewall alleviates the potential for unwanted services to run on the system, and cuts down on system usage.

Check Content

Open System Preferences->Security. Select Firewall tab. Select Advanced (firewall should be started). Either "Block all incoming connections" should be checked or only essential services and applications should be allowed. If not, this is a finding.

Fix Text

Open System Preferences -> Security. Select Firewall tab. Select the Advanced button. Check "Block all incoming connections" or remove any non-essential services and applications.

Additional Identifiers

Rule ID: SV-38563r1_rule

Vulnerability ID: V-25335

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.